Re: Adding user@ to HTTP[S] URIs

On Mon, 27 Jan 2020, Rick van Rein wrote:

> Please introduce me to any dragons you encounter; this caution alone does 
> not seem cause for action yet.

Maybe not a dragon, but...

$ curl foo@localhost -v
...
> GET / HTTP/1.1
> Host: localhost
> Authorization: Basic Zm9vOg==

... because userinfo in HTTP has only ever been there and used for 
authentication.

(Zm9vOg== is "foo:" base64 encoded)

-- 

  / daniel.haxx.se

Received on Monday, 27 January 2020 12:22:26 UTC